Gadu-Ghost 1.2 server
(Backdoor.Win32.Plimus.11)
(Backdoor.Win32.Plimus.12 for Server)

by Wojass

Written in Delphi

Made in Poland

Released in April 2004

Other versions


Server:
dropped file:
c:\WINDOWS\SYSTEM\bez_exe.exe 

size: 294.073 bytes

startup:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "G@duGhost" 

MegaSecurity